Method and system for the protected storage of downloaded media content via a virtualized platform

ABSTRACT

A method and system for the protected storage of downloaded media content via a virtualized platform. A method comprises downloading content to a special purpose virtual machine and then storing the downloaded content at a location, where the location is only accessible via the special purpose virtual machine. The stored content is then streamed over a virtual network to a general purpose virtual machine, where the special purpose virtual machine and the general purpose virtual machine exist on the same personal computer (PC).

This application is a continuation of prior U.S. application Ser. No.12/599,030, filed Sep. 14, 2009, which is a continuation of prior U.S.application Ser. No. 11/479,099, filed Jun. 30, 2006 (now U.S. Pat. No.7,610,310).

BACKGROUND

The importance for the consumer electronic device industry tocontinuously strive to produce products that protect media contentcannot be overstated. Currently, the owners of premium media content,such as movies, are hesitant to distribute the media content over theInternet to general purpose personal computers (PCs). One of the reasonsfor this hesitancy is the concern that PC end-users will redistributethe media content or otherwise violate the license terms of the mediacontent. This is particularly true for media content that is downloadedinto files. Unlike streaming, in which media content is discarded as itis played, downloaded files are stored in a file system where they arevulnerable to misuse. Content owners may use technology such asencryption and/or Digital Rights Management to address these concerns,but these schemes often are broken by determined hackers.

BRIEF DESCRIPTION OF THE DRAWINGS

The invention may be best understood by referring to the followingdescription and accompanying drawings that are used to illustrateembodiments of the invention. In the drawings:

FIG. 1 illustrates an embodiment of an environment for the invention, inwhich some embodiments may operate;

FIG. 2 illustrates an embodiment of an environment for the invention, inwhich some embodiments may operate;

FIG. 3 illustrates downloading media content into a special purposevirtual machine, according to an embodiment of the invention;

FIG. 4 illustrates streaming media content between a special purposevirtual machine and a general purpose virtual machine, according to anembodiment of the invention; and

FIG. 5 is a flow diagram of one embodiment of a process for theoperation of the protected storage of downloaded media content via avirtualized platform, in which some embodiments of the invention mayoperate.

DESCRIPTION OF EMBODIMENTS

According to an embodiment of the invention, a method and system for theprotected storage of downloaded media content via a virtualized platformare described. The invention provides a secure, closed environment inwhich media content or files can be stored on a general purpose PC insuch a way that the media content is not accessible to end-users. Here,users are prevented from redistributing media content and reduces therisk of hacking. In addition, since media content is kept in acontrolled environment it is easier to enforce policies such as deletionafter the license terms have expired.

In the following description, for purposes of explanation, numerousspecific details are set forth. It will be apparent, however, to oneskilled in the art that embodiments of the invention can be practicedwithout these specific details.

In the following detailed description of the embodiments, reference ismade to the accompanying drawings that show, by way of illustration,specific embodiments in which the invention may be practiced. In thedrawings, like numerals describe substantially similar componentsthroughout the several views. These embodiments are described insufficient detail to enable those skilled in the art to practice theinvention. Other embodiments may be utilized and structural, logical,and electrical changes may be made without departing from the scope ofthe present invention.

FIGS. 1 and 2 each illustrate an embodiment of an environment for theinvention, in which some embodiments may operate. The specificcomponents shown in FIGS. 1 and 2 represent one example of aconfiguration that may be suitable for the invention and is not meant tolimit the invention. Thus, other embodiments of the invention mayinclude more or less components as described in each of FIGS. 1 and 2.For example, the functionality of two or more components of FIGS. 1 and2 may be combined into one component. Likewise, the functionality of onecomponent of FIG. 1 or 2 may be separated and performed by more than onecomponent. Each component shown in FIG. 1 or 2 may be implemented as ahardware element, as a software element executed by a processor, as asilicon chip encoded to perform its functionality described herein, orany combination thereof.

The environments of each of FIGS. 1 and 2 may be implemented as a wiredcommunication system, a wireless communication system, or a combinationof both. Although the environment of each of FIGS. 1 and 2 may beillustrated using a particular communication medium by way of example,it may be appreciated that the principles and techniques discussedherein may be implemented using any type of communication media andaccompanying technology. The embodiments are not limited in thiscontext. Other communication systems may be added or substitutedaccording to the particular application for the environment in FIGS. 1and 2 and/or as new types of systems are developed.

Referring to FIG. 1, the environment may include, but is not necessarilylimited to, a computing device 102, a remote media server 104, one ormore content providers 106(1)-106(n), the Internet 108, a local areanetwork (LAN) 110, a user interface 112 and a display 114. Computingdevice 102 may include, but is not necessarily limited to, acommunications interface 116, a processor 118, memory 120, a storagedevice 122, a bus 124 and a display adapter 126. At a high level and inan embodiment of the invention, computing device 102 may receive andstore content (e.g., media content) and related guide data for thecontent from remote media server 104, the Internet 108 and LAN 110.Computing device 102 may also receive input via user interface 112. Thecontent and related guide data may be displayed on display 114.

In an embodiment of the invention, content may include, but is notnecessarily limited to, shows or programs, voice, audio, music,graphics, video games, books, and so forth. In an embodiment of theinvention, related guide data may include one or more of, but is notnecessarily limited to, content name, channel or location (e.g.,location on the Internet 108 via an Internet Protocol (IP) address orUniform Resource Location (URL), location on a hard disk found in LAN110, location on computing device 102 itself, etc.), type of content(e.g., broadcast, stream, download, etc.), metadata (e.g., contentdescription, year of release, ratings information, category, etc.), airtime, a brief synopsis, stars, and so forth. These examples are notmeant to limit the invention. Each of the components of FIG. 1 isdescribed next in more detail.

Computing device 102 may be any device adapted to include thefunctionality of the present invention. For example, device 102 may be adigital television, set-top box, a digital video recorder, a digitalnetwork recorder, a personal computer, a portable computer, a cellulartelephone, a personal digital assistant (PDA), a computing tablet, orany other similar device. Although only one computing device 102 isdepicted in FIG. 1, the invention may involve multiple computing devices102.

In an embodiment of the invention, computing device 102 may includecommunications interface 116 that allows for the receipt of high-speeddigital data such as a cable modem, DSL modem, Ethernet interface,satellite receiver, etc. Computing device 102 may also include anon-volatile storage device 122 for storing received digital data forlater access. Such storage devices typically include magnetic media suchas hard disk drives and may include other machine readable media such asoptical disks, card and stick memory devices, flash memory devices, andthe like.

In one embodiment, the invention is included in computing device 102 assoftware that is stored on storage device 122 or other machine readablemedium and is executed by processor 118 which utilizes memory 120.Processor 118 may be any processor, and memory 120 may be any kind ofrandom access memory (RAM) or other form of memory.

Computing device 102 may process received content and related guide data(e.g., download and store) and sends a resulting signal via displayadapter 126 to display 114 to be presented to a viewer. Communicationsinterface 116, processor 118, memory 120, storage device 122 and displayadapter 126 are, in one embodiment, coupled to bus 124. In variousembodiments, computing device 102 may include multiple communicationsinterfaces, processors, storage devices, display adapters and buses, aswell as other components not shown in FIG. 1. In various embodiments,computing device 102 may include an audio processor and/or gameprocessor or game interface, one or more digital tuners, one or moreanalog tuners, and so forth.

In an embodiment of the invention, computing device 102 may receivecontent and related guide data from remote media server 104, theInternet 108 and LAN 110. This may be a straight download of all contentand related guide data or may be a query to limit the amount ofinformation received by computing device 102. Remote media server 104may receive data from at least one content provider 106 and forwardsdigital data to computing device 102. Content providers 106 may be aserver computer or a group, subnetwork, LAN or other group of multiplecomputers, that provide data to remote media server 404.

The Internet 108 may be used by computing device 102 for streamedcontent and related guide data (such as via subscription services) andfor downloadable content and related guide data (such as video/audiofrom an Internet-based store that allows a user to purchasevideo/audio). LAN 110 may be a household, office, or store media serveror personal computers that contain content, such as, for example,television programs, photographs and audio files.

In embodiments of the invention, connections between content providers106, remote media server 104, the Internet 108, LAN 110 and computingdevice 102 may be one or more of T1 lines, T3 lines, coaxial cable,Ethernet, twisted-pair, fiber optics such as a Synchronous OpticalNetwork (SONET), digital television (DTV), cable television (CATV),microwave, satellite, radio waves, or any combination of wired/wirelesscommunications.

In an embodiment of the invention, remote media server 104, the Internet108 and LAN 110 may receive content as digital data or analog data. Ifanalog data is received, it may be converted into an appropriate digitalformat before being forwarded to computing device 102. When content isreceived as analog data, it may be any well-known or proprietary analogformat, such as the National Television System Committee (NTSC) format.

The format of the content sent to computer device 102 may be any digitaldata format, including, for example, data interchange formats such asInternet Protocol (IP) Packets and File Transfer Protocol (FTP) packets;combined audio and moving video formats such as the formats promulgatedby the International Telecommunications Union (ITU), the AdvancedTelevision Systems Committee (ATSC), and similar organizations such asHigh Definition Television (HDTV) and Moving Pictures Expert Group(MPEG); related audio formats; still video formats such as JointPhotographic Experts Group (JPEG) format, Graphic Interchange Format(GIF); and so forth.

Display 114 may be external to computing device 102 or may beincorporated into device 102. Display 114 may be a cathode ray tube(CRT) display monitor, a thin film transistor (TFT) display screen, aliquid crystal display (LCD), or any display device suitable fordisplaying graphics and images.

User interface 112 may be any device capable of allowing one or moreviewers to interface with computing device 102. User interface 112 maybe external to computing device 102 or may be incorporated into device102. For example, user interface 112 may be utilized by one or moreviewers to log into computing device 102, to view content and/or relatedguide data, and so forth. In embodiments of the invention, userinterface 112 may be implemented as a remote control, a PDA, a touchscreen or button(s) on the display 114 or computing device 102, ajoystick, a keyboard, a game pad, a personal computer, a laptopcomputer, a cellular phone, and so forth. These examples are providedfor illustration purposes only and are not meant to limit the invention.

FIG. 2 illustrates an embodiment of an environment for the invention, inwhich some embodiments may operate. In FIG. 2, the invention isimplemented via an embodiment of a virtualized platform. In general, avirtualized platform is a single physical platform that is segregatedinto a plurality of virtual machines. The physical platform incorporatesat least one virtual machine monitor (VMM). A conventional VMM typicallyruns on a computer and presents to other software the abstraction of oneor more virtual machines. Each virtual machine may function as aself-contained platform, running its own “guest operating system” (i.e.,an operating system (OS) hosted by the VMM) and other software,collectively referred to as guest software.

Processes running within a virtual machine are provided with anabstraction of some hardware resources and may be unaware of othervirtual machines within the system. A hypervisor provides thevirtualization abstraction of computer systems underneath it. Everyvirtual machine assumes that it has full control over the hardwareresources allocated to it. The VMM is an entity that is responsible forappropriately managing and arbitrating system resources among thevirtual machines including, but not limited to, processors, input/out(I/O) devices and memory.

In the embodiment described herein in relation to FIG. 2, a virtualizedplatform is utilized for the protected storage of downloaded mediacontent. Implementing the invention via a virtualized platform providesa secure, closed environment in which media content or files can bestored on a general purpose PC in such a way that the media content isnot accessible to end-users, and thus helps to prevent unauthorizedredistribution of the downloaded media content. Although the embodimentin FIG. 2 is described with reference to a virtualized platform anddownloaded media content, the present invention is not limited in thisregard and is applicable to any secure, closed environment and/or anytype of content.

Referring to FIG. 2, the environment includes, but is not necessarilylimited to, a closed special purpose virtual machine 202, a generalpurpose virtual machine 204, a VMM 206 and platform hardware 208. Thoughtwo virtual machines are shown in FIG. 2, it is understood that anynumber of virtual machines may be present in environment. Each of thesecomponents is described next in more detail.

Special purpose virtual machine 202 may include, but is not necessarilylimited to, a download manager 210 and a virtual media server 212.Download manager 210 and virtual media server 212 are executing in aclosed special purpose operating system of virtual machine 202. Generalpurpose virtual machine 204 may include, but is not necessarily limitedto, a media player 214. Media player 214 is operating in a generalpurpose operating system of virtual machine 204 and facilitates a userto view the media content. VMM 304 may include, but is not limited to, avirtual disk partition 216. Virtual disk partition 216 is accessibleonly to special purpose virtual machine 202. Platform hardware 208 canbe of a personal computer (PC), digital television, mainframe, handhelddevice, portable computer, set-top box, or any other computing system,that is adapted to perform the functionality of the invention. In anembodiment of the invention, platform hardware 208 is similar to whatwas described above with reference to FIG. 1.

In an embodiment of the invention, special purpose virtual machine 202and general purpose virtual machine exist on the same general purposePC. As illustrated in FIG. 3, media content 302 is downloaded bydownload manager 210 of special purpose virtual machine 202. Asdescribed above with reference to FIG. 1, media content 302 may be sentvia one or more of remote media server 104, the Internet 108 and LAN110. The downloaded media content is then stored in virtual diskpartition 216 of VMM 206. Virtual disk partition 216 is accessible onlyto special purpose virtual machine 202. Download manager 210 may use atraditional client/server scheme, a peer-to-peer scheme, and so forth,to download the media content. These download schemes are provided forillustration purposes only and are not meant to limit the invention.

In an embodiment of the invention and as illustrated in FIG. 4, virtualmedia server 212 of special purpose virtual machine 202 accesses thestored media content in virtual disk partition 216 and streams it over avirtual network connection to media player 214 of general purposevirtual machine 204. Since streaming is used to move the media contentbetween special purpose virtual machine 202 and general purpose machine204 existing on the same general purpose PC, the media content neverexists in the general purpose operating system's file system and thus isnot accessible by applications other than media player 204. In addition,since the streaming is between two virtual machines existing on the samegeneral purpose PC, the operation of streaming the media content doesnot suffer from the latency, quality of service, or bandwidthlimitations that occur when content is streamed across the Internet, forexample.

As mentioned above and in an embodiment of the invention, virtual diskpartition 216 is accessible only to special purpose virtual machine 202.There are various ways in which the content of virtual disk partition216 may be protected from disk utilities, hackers, being “spied on” byrouge software, and so forth. One way to protect the content of virtualdisk partition 216 is to encrypt the content and metadata in a mannersuch that it is only accessible via an encryption key or similarmechanism. The encryption key would only be known by the special purposeoperating system or other software running on virtual machine 202.Software or programs running in a closed environment, such as wouldexist on special purpose virtual machine 202, are better able to use anencryption key or similar mechanism without being “spied on” by rougesoftware. In a software implementation, the security mechanism could beupgraded and the license to view compromised content could be revoked.Another possible way to protect the content of virtual disk partition216 is to use a disk hardware security mechanism that would protectindividual partitions. These examples are provided for illustrationpurposes only and are not meant to limit the invention.

Embodiments of the operation of the present invention are described nextwith reference to FIG. 5. The flow diagram and other descriptions ofprocesses herein are not intended to imply a fixed order of performingthe process stages. Rather, the process stages may be performed in anyorder that is practicable.

FIG. 5 is a flow diagram of one embodiment of a process for theoperation of the protected storage of downloaded media content via avirtualized platform, in which some embodiments of the invention mayoperate. Referring to FIG. 5, the process begins at block 502 wheremedia content is downloaded by a download manager operating on a closedsystem (such as download manager 210 of special purpose virtual machine202 of FIG. 2). The downloaded media content is then stored in a virtualdisk partition (such as virtual disk partition 216 of VMM 206 of FIG.2), at block 504. A media server operating on the closed system (such asvirtual media server 212 of special purpose virtual machine 202 of FIG.2) accesses the stored media content in the virtual disk partition andstreams it over a virtual network connection to a media player operatingin a general system (such as media player 214 of general purpose virtualmachine 204 of FIG. 2), at block 506. The media player allows a user toview the media content, at block 508.

Embodiments of the present invention may be implemented in software,firmware, hardware or by any combination of various techniques. Forexample, in some embodiments, the present invention may be provided as acomputer program product or software which may include a machine orcomputer-readable medium having stored thereon instructions which may beused to program a computer (or other electronic devices) to perform aprocess according to the present invention. In other embodiments, stepsof the present invention might be performed by specific hardwarecomponents that contain hardwired logic for performing the steps, or byany combination of programmed computer components and custom hardwarecomponents.

Thus, a machine-readable medium may include any mechanism for storing ortransmitting information in a form readable by a machine (e.g., acomputer). These mechanisms include, but are not limited to, a harddisk, floppy diskettes, optical disks, Compact Disc-Read-Only Memory(CD-ROMs), magneto-optical disks, Read-Only Memory (ROMs), Random AccessMemory (RAM), Erasable Programmable Read-Only Memory (EPROM),Electrically Erasable Programmable Read-Only Memory (EEPROM), magneticor optical cards, flash memory, a transmission over the Internet,electrical, optical, acoustical or other forms of propagated signals(e.g., carrier waves, infrared signals, digital signals, etc.) or thelike.

Some portions of the detailed descriptions above are presented in termsof algorithms and symbolic representations of operations on data bitswithin a computer system's registers or memory. These algorithmicdescriptions and representations are the means used by those skilled inthe data processing arts to convey the substance of their work to othersskilled in the art most effectively. An algorithm is here, andgenerally, conceived to be a self-consistent sequence of operationsleading to a desired result. The operations are those requiring physicalmanipulations of physical quantities. Usually, although not necessarily,these quantities take the form of electrical or magnetic signals capableof being stored, transferred, combined, compared, and otherwisemanipulated. It has proven convenient at times, principally for reasonsof common usage, to refer to these signals as bits, values, elements,symbols, characters, terms, numbers, or the like.

It should be borne in mind, however, that all of these and similar termsare to be associated with the appropriate physical quantities and aremerely convenient labels applied to these quantities. Unlessspecifically stated otherwise as apparent from the above discussions, itis appreciated that discussions utilizing terms such as “processing” or“computing” or “calculating” or “determining” or the like, may refer tothe action and processes of a computer system, or similar electroniccomputing device, that manipulates and transforms data represented asphysical (electronic) quantities within the computer system's registersand memories into other data similarly represented as physicalquantities within the computer system memories or registers or othersuch information storage, transmission or display devices.

Reference throughout this specification to “one embodiment” or “anembodiment” means that a particular feature, structure, orcharacteristic described in connection with the embodiment is includedin at least one embodiment of the invention. Thus, the appearances ofthe phrases “in one embodiment” or “in an embodiment” in various placesthroughout this specification are not necessarily all referring to thesame embodiment. Furthermore, the particular features, structures, orcharacteristics may be combined in any suitable manner in one or moreembodiments.

It is to be understood that the above description is intended to beillustrative, and not restrictive. Many other embodiments will beapparent to those of skill in the art upon reading and understanding theabove description. The scope of the invention should, therefore, bedetermined with reference to the appended claims, along with the fullscope of equivalents to which such claims are entitled.

What is claimed is:
 1. A method comprising: making the stored contentavailable for streaming from a special purpose virtual machine over avirtual network to a general purpose virtual machine, wherein thespecial purpose virtual machine and the general purpose virtual machineexist on the same computer, and wherein the content has been downloadedfrom one or more of a remote media server, the Internet and a local areanetwork (LAN) to the special purpose virtual machine and has beenstored, prior to streaming, at a location accessible only by the specialpurpose machine.
 2. The method of claim 1, wherein the stored contentavailable for streaming is only accessible via an application running onthe general purpose virtual machine.
 3. The method of claim 2, whereinthe application allows a user to view the content.
 4. The method ofclaim 3, wherein the application comprises a media player.
 5. The methodof claim 1, wherein the location comprises a virtual disk partition thatexists on the same computer as the special purpose virtual machine andthe general purpose virtual machine.
 6. The method of claim 5, whereinthe stored content on the virtual disk partition is encrypted and canonly be decrypted via a mechanism known only to the special purposevirtual machine.
 7. A system comprising: a closed virtual machine; andan application configured to execute on a general purpose virtualmachine, wherein the closed virtual machine and the general purposevirtual machine exist on the same computer, wherein the closed virtualmachine is configured to download content and to store the downloadedcontent at a location, wherein the location is only accessible via theclosed virtual machine, and the stored content is made available forstreaming from the closed virtual machine over a virtual network to theapplication, and wherein the content has been downloaded from one ormore of a remote media server, the Internet and a local area network(LAN).
 8. The system of claim 7, wherein the content is only accessiblevia the application.
 9. The system of claim 7, wherein the applicationcomprises a media player.
 10. The system of claim 7, wherein thelocation comprises a virtual disk partition that exists on the samecomputer as the closed virtual machine and the general purpose virtualmachine.
 11. The system of claim 10, wherein the stored content on thevirtual disk partition is encrypted and can only be decrypted via amechanism known only to the closed virtual machine.
 12. Acomputer-readable non-transitory medium containing instructions which,when executed by a processing system, cause the processing system toperform a method, the method comprising: making the stored contentavailable for streaming from a special purpose virtual machine over avirtual network to a general purpose virtual machine, wherein thespecial purpose virtual machine and the general purpose virtual machineexist on the same computer, and wherein the content has been downloadedfrom one or more of a remote media server, the Internet and a local areanetwork (LAN) to the special purpose virtual machine and has beenstored, prior to streaming, at a location accessible only by the specialpurpose machine.
 13. The computer-readable non-transitory medium ofclaim 12, wherein streaming the stored content over a virtual network toa general purpose virtual machine includes streaming the stored contentto an application running on the general purpose virtual machine,wherein the streamed content is only accessible via the application. 14.The computer-readable non-transitory medium of claim 12, wherein theapplication comprises a media player.
 15. The computer-readablenon-transitory medium of claim 12, wherein the location comprises avirtual disk partition that exists on the same computer as the specialpurpose virtual machine and the general purpose virtual machine.
 16. Thecomputer-readable non-transitory medium of claim 12, wherein the storedcontent on the virtual disk partition is encrypted and can only bedecrypted via a mechanism known only to the special purpose virtualmachine.